326882 - reloadChrome from "extension developer" extension + select menu item crashes Firefox [@ nsMenuX::OnCreate]

Status: RESOLVED WORKSFORME

(Core Graveyard :: Widget: Mac, defect)

Description

[Johannes la Poutre]

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1
Build Identifier: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1

Firefox crashes if I select a menu item (from the top window menu) after I did a reload chrome from the Extension Developer menu.

The crash does not happen until I select a menu item.

Reproducible: Always

Steps to Reproduce:
1. Create fresh FF profile
2. Install Extension Developer extension from http://ted.mielczarek.org/code/mozilla/extensiondev/ (current version: 0.2.2.20050505)
3. Restart Firefox (installs extension)
4. Select "Reload all Chrome" from Ext. dev. menu
5. Click on the main application menu bar (top of window on Mac);
6. Firefox crashes before the menu is displayed

Actual Results:  
Firefox crashes even before the menu is displayed

Expected Results:  
Menus should be displayed and function as normal

Will try to find a talkback ID, otherwise attach a dump from talkback.

Comment 1

[Johannes la Poutre]

OK, I submitted a talkback with ID TB15067101M

Comment 2

[Adam Guthrie]

Incident ID: 15067101
Stack Signature	nsMenuX::OnCreate() bcf86596
Product ID	Firefox15
Build ID	2006011112
Trigger Time	2006-02-12 02:36:47.0
Platform	MacOSX
Operating System	Darwin 8.4.0
Module	firefox-bin + (00312e4c)
URL visited	
User Comments	Select "Reload all chrome" from Extension Developer extension
Since Last Crash	1790 sec
Total Uptime	556180 sec
Trigger Reason	SIGBUS: Bus Error: (signal 10)
Source File, Line No.	/builds/tinderbox/Fx-Mozilla1.8.0/Darwin_7.9.0_Depend/mozilla/widget/src/mac/nsMenuX.cpp, line 848
Stack Trace 	
nsMenuX::OnCreate()  [/builds/tinderbox/Fx-Mozilla1.8.0/Darwin_7.9.0_Depend/mozilla/widget/src/mac/nsMenuX.cpp, line 848]
nsMenuX::OnCreate()  [/builds/tinderbox/Fx-Mozilla1.8.0/Darwin_7.9.0_Depend/mozilla/widget/src/mac/nsMenuX.cpp, line 174]
MyMenuEventHandler()  [/builds/tinderbox/Fx-Mozilla1.8.0/Darwin_7.9.0_Depend/mozilla/widget/src/mac/nsMenuX.cpp, line 122]
DispatchEventToHandlers()
SendEventToEventTargetInternal()
SendEventToEventTargetWithOptions()
SendMenuOpening()
DrawTheMenu()
MenuChanged()
TrackMenuCommon()
MenuSelectCore()
MenuSelect()
nsMacMessagePump::DoMouseDown()   nsMacMessagePump::DispatchEvent()   nsMacMessagePump::DoMessagePump()   nsAppShell::Run()  [/builds/tinderbox/Fx-Mozilla1.8.0/Darwin_7.9.0_Depend/mozilla/widget/src/mac/nsAppShell.cpp, line 114]
nsAppStartup::Run()   XRE_main()  [/builds/tinderbox/Fx-Mozilla1.8.0/Darwin_7.9.0_Depend/mozilla/toolkit/xre/nsAppRunner.cpp, line 2315]
_start()   start()

Comment 3

[Hermann Schwab]

wfm Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1
wfm Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8) Gecko/20060212 Firefox/1.5

From the extension's install page:
This extension is currently in beta. Install at your own risk.

http://ted.mielczarek.org/code/mozilla/extensiondev/TODO.txt
  - Done:
     Reload all Chrome (needs patch from bug 256504 to work with jars)

I don't know if Bug 256504 got checked in to the branch

Bug 256504 Implement flush for jar cache

Comment 4

[Adam Guthrie]

*** Bug 355356 has been marked as a duplicate of this bug. ***

Comment 5

[timeless]

Attachment: crash i got yesterday - TB47225777K

i'm not sure this is the same. i was using 2.0.0.14 and had instructed the update dialog to get me the new version. then i started closing windows because i wanted to install it....

Comment 6

[Josh Aas]

Bug 443455?

Comment 7

[timeless]

probably. did you have something against using an existing bug? :(

Comment 8

[Smokey Ardisson (offline for a while; not following bugs - do not email)]

Ted, I don't see this still crashing on the trunk (or 3.5); is it still crashing for you?

Comment 9

[(not currently active) Ted Mielczarek]

I don't think I ever tested this. I was just shuffling components. :)

Comment 10

[Smokey Ardisson (offline for a while; not following bugs - do not email)]

Since I did test it and couldn't crash, and since the bug Josh mentioned as a possible dupe is fixed, closing WFM (since we can't move it back to Widget:Mac in Core Graveyard where it belongs ;) ).

Comment 11

[timeless]

it is possible to move bugs to graveyard :)